Overview

overview

9

Static

static

5

17917c20bf...73.exe

windows7-x64

9

17917c20bf...73.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    17917c20bfa11de5b79cafeb3a177d4c7dfbfdbd507db35117e4fdf820daaf73.exe

  • Size

    1.0MB

  • Sample

    240819-bkcc3aygjm

  • MD5

    c56eaeb8a4616e51e25b65186cdef72b

  • SHA1

    2f6fe932efa07965dd8455921949a72ce352a687

  • SHA256

    17917c20bfa11de5b79cafeb3a177d4c7dfbfdbd507db35117e4fdf820daaf73

  • SHA512

    46a885efb790c8ffe6d4f492ef8c8b23f0d273890b1684b9de7d741edd7c7d957c8a6baabb40fca75937a0155494f9d6240cf99d8a5732da550e80013ea876df

  • SSDEEP

    24576:4AHnh+eWsN3skA4RV1Hom2KXMmHalmyqTa1pYUnXMkCn5:/h+ZkldoPK8Yal4G1pYU3+

Score
9/10
collectioncredential_accessdiscoverystealer

Malware Config

Targets

    • Target

      17917c20bfa11de5b79cafeb3a177d4c7dfbfdbd507db35117e4fdf820daaf73.exe

    • Size

      1.0MB

    • MD5

      c56eaeb8a4616e51e25b65186cdef72b

    • SHA1

      2f6fe932efa07965dd8455921949a72ce352a687

    • SHA256

      17917c20bfa11de5b79cafeb3a177d4c7dfbfdbd507db35117e4fdf820daaf73

    • SHA512

      46a885efb790c8ffe6d4f492ef8c8b23f0d273890b1684b9de7d741edd7c7d957c8a6baabb40fca75937a0155494f9d6240cf99d8a5732da550e80013ea876df

    • SSDEEP

      24576:4AHnh+eWsN3skA4RV1Hom2KXMmHalmyqTa1pYUnXMkCn5:/h+ZkldoPK8Yal4G1pYU3+

    Score
    9/10
    collectioncredential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks